<html>
<head>
<title> Securing Communication to Server with SSL Encryption </title>
<meta name="Keywords" content="" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" type="text/css" href="stylesheet.css"/>
<script src="locate.js"></script>
<link href="prettify.css" type="text/css" rel="stylesheet" />
<script type="text/javascript" src="prettify.js"></script>
</head>
<script src="highlight.js"></script>
<body bgcolor="#FFFFFF" text="#000000" link="#0000A0" alink="#008000" vlink="#FF0000" onLoad="FindCorrectTOCPage(); prettyPrint()">
<table cellpadding="0" cellspacing="0" border="0">
<tr valign="top">
<td>
<p class="pagenavigation"><a href="24820.htm" target="_self"><img src="38976.gif" alt="Previous page" height="16" width="16" vspace="0" hspace="1" align="top" border="0"> Previous page</a></p></td>
<td>
<p class="pagenavigation"><a href="53086.htm" target="_self"><img src="38977.gif" alt="Next page" height="16" width="16" vspace="0" hspace="1" align="top" border="0"> Next page</a></p></td>
<td>
<p class="pagenavigation"><a href="toc4151828.htm" target="TOC"><img src="38970.gif" alt="Locate page" height="16" width="16" vspace="0" hspace="1" align="top" border="0"> Locate page</a></p></td>
<td>
<p class="pagenavigation"><a href="toc4151828.htm" target="TOC"><a class="" title="" href="javascript:print();" target="_self"><img src="39072.gif" alt="Print this page" height="16" width="16" vspace="0" hspace="1" align="top" border="0"></a></a></p></td>
</tr>
</table>
<h3 class="heading3">Securing Communication to Server with SSL Encryption</h3>
<p class="bodytext">For security reasons, you can access your control panel only through a secure connection provided by Secure Sockets Layer-enabled hypertext transfer protocol. All data you exchange with the Plesk managed server are encrypted, thus preventing interception of sensitive information. The SSL certificate used in the data encryption process is automatically generated and installed on the server during installation of the control panel. This is the so-called self-signed certificate: it is not signed by a recognized certification authority (CA), therefore, upon attempt to connect to your control panel, you and your customers will see warning messages in Web browsers.</p>
<p class="bodytext">To gain customer confidence, you should purchase an SSL certificate from a reputable certification authority, and install it to the control panel.</p>
<p class="bodytext">You can either:</p>
<ul class="listbullet"><li class="listbullet">use the facilities for purchasing SSL certificates from Comodo, GeoTrust, Inc. or GoDaddy provided by your control panel,<p class="listcontinue">OR</p>
</li><li class="listbullet">create a certificate signing request (CSR) from the control panel and submit it to the certification authority of your choice, which will create an SSL certificate for you.<p class="listnote"><strong class="buttons">Note:</strong> If you are going to use the control panel's facilities for purchasing a certificate through MyPlesk.com online store, you should not use command line tools for creating the certificate signing request.</p>
</li></ul><p class="procedureheading">To purchase an SSL certificate from Comodo, GeoTrust, Inc. or GoDaddy through MyPleskCom online store and secure your control panel:</p>
<ol class="procedurelistnumber"><li class="procedurelistnumber">Go to <strong class="specialbold">Server</strong> &gt; <strong class="specialbold">Certificates</strong>. A list of SSL certificates that you have in your repository will be displayed.</li><li class="procedurelistnumber">Click <strong class="specialbold">Add New Certificate</strong>.</li><li class="procedurelistnumber">Specify the certificate properties:<ul class="listbullet2"><li class="listbullet2">Certificate name. This will help you identify this certificate in the repository.</li><li class="listbullet2">Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit.</li><li class="listbullet2">Specify your location and organization name. The values you enter should not exceed the length of 64 symbols.</li><li class="listbullet2">Specify the host name for which you wish to purchase an SSL certificate. For example: your-domain.com</li><li class="listbullet2">Enter your e-mail address.</li></ul></li><li class="procedurelistnumber">Make sure that all the provided information is correct and accurate, as it will be used to generate your private key.</li><li class="procedurelistnumber">Click <strong class="specialbold">Buy Cert</strong>. <p class="listcontinue">Your private key and certificate signing request will be generated — do not delete them. MyPlesk.com login page will open in a new browser window.</p>
</li><li class="procedurelistnumber">Register or log in to an existing MyPlesk.com account and you will be taken step by step through the certificate purchase procedure.</li><li class="procedurelistnumber">Choose the type of certificate that you wish to purchase.</li><li class="procedurelistnumber">Click <strong class="specialbold">Proceed to Buy</strong> and order the certificate. In the Approver E-Mail drop-down box, please select the correct Approver e-mail. <p class="listcontinue">The approver e-mail is an e-mail address that can confirm that certificate for specific domain name was requested by an authorized person.</p>
</li><li class="procedurelistnumber">Once your certificate request is processed, you will be sent a confirmation e-mail. After you confirm, the certificate will be sent to your e-mail.</li><li class="procedurelistnumber">When you receive your SSL certificate, save it on your local machine or network.</li><li class="procedurelistnumber">Return to the SSL Certificates repository (<strong class="specialbold">Server </strong>&gt;<strong class="specialbold"> Certificates</strong>).</li><li class="procedurelistnumber">Click <strong class="specialbold">Browse</strong> in the middle of the page and navigate to the location of the saved certificate. Select it, and then click <strong class="specialbold">Send File</strong>. This will upload the certificate to the repository.</li><li class="procedurelistnumber">Select the check box corresponding to the certificate you just added, and click <img src="16643.gif" alt="" height="16" width="16" vspace="0" hspace="0" align="bottom" border="0"> <strong class="specialbold">Secure control panel</strong>.</li></ol><p class="bodytext"></p>
<p class="procedureheading">To secure your control panel with an SSL certificate from other certificate authorities:</p>
<ol class="procedurelistnumber"><li class="procedurelistnumber">Go to <strong class="specialbold">Server</strong> &gt; <strong class="specialbold">Certificates</strong>. A list of SSL certificates that you have in your repository will be displayed.</li><li class="procedurelistnumber">Click <strong class="specialbold">Add New Certificate</strong>.</li><li class="procedurelistnumber">Specify the certificate properties:<ul class="listbullet2"><li class="listbullet2">Certificate name. This will help you identify this certificate in the repository.</li><li class="listbullet2">Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit.</li><li class="listbullet2">Specify your location and organization name. The values you enter should not exceed the length of 64 symbols.</li><li class="listbullet2">Specify the host name for which you wish to purchase an SSL certificate. For example: your-domain.com</li><li class="listbullet2">Enter your e-mail address.</li></ul></li><li class="procedurelistnumber">Make sure that all the provided information is correct and accurate, as it will be used to generate your private key.</li><li class="procedurelistnumber">Click <strong class="specialbold">Request</strong>. Your private key and certificate signing request will be generated and stored in the repository.</li><li class="procedurelistnumber">In the list of certificates, click the name of the certificate you need. A page showing the certificate properties opens.</li><li class="procedurelistnumber">Locate the <strong class="specialbold">CSR section</strong> on the page, and copy the text that starts with the line <strong class="specialbold">-----BEGIN CERTIFICATE REQUEST-----</strong> and ends with the line <strong class="specialbold">-----END CERTIFICATE REQUEST-----</strong> to the clipboard.</li><li class="procedurelistnumber">Visit the Web site of the certification authority from which you want to purchase an SSL certificate, and follow the links on their site to start a certificate ordering procedure. When you are prompted to specify CSR text, paste the data from the clipboard into the online form and click <strong class="specialbold">Continue</strong>. The certification authority will create an SSL certificate in accordance with the information you supplied.</li><li class="procedurelistnumber">When you receive your SSL certificate, save it on your local machine or network.</li><li class="procedurelistnumber">Return to the SSL Certificates repository (<strong class="specialbold">Server</strong> &gt;<strong class="specialbold"> Certificates</strong>).</li><li class="procedurelistnumber">Click <strong class="specialbold">Browse</strong> in the middle of the page and navigate to the location of the saved certificate. Select it, and then click <strong class="specialbold">Send File</strong>. This will upload the certificate to the repository.</li><li class="procedurelistnumber">Select the check box corresponding to the certificate you just added, and click <img src="16643.gif" alt="" height="16" width="16" vspace="0" hspace="0" align="bottom" border="0"> <strong class="specialbold">Secure control panel</strong>.</li></ol><p class="bodytext"></p>
<p class="procedureheading">In case you need to generate a self-signed certificate, follow this procedure:</p>
<ol class="procedurelistnumber"><li class="procedurelistnumber">Go to <strong class="specialbold">Server</strong> &gt; <strong class="specialbold">Certificates</strong>. A list of SSL certificates that you have in your repository will be displayed.</li><li class="procedurelistnumber">Click <strong class="specialbold">Add New Certificate</strong>.</li><li class="procedurelistnumber">Specify the certificate properties:<ul class="listbullet2"><li class="listbullet2">Certificate name. This will help you identify this certificate in the repository.</li><li class="listbullet2">Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit.</li><li class="listbullet2">Specify your location and organization name. The values you enter should not exceed the length of 64 symbols.</li><li class="listbullet2">Specify the host name for which you wish to purchase an SSL certificate. For example: your-domain.com</li><li class="listbullet2">Enter your e-mail address.</li></ul></li><li class="procedurelistnumber">Click the <strong class="specialbold">Self-Signed</strong> button. Your certificate will be generated and stored in the repository.</li></ol>


</body>
<script>highlightTOC()</script>
</html>

